nix: more cloud defaults